# Standalone cluster using new parameter beat-xpack in metricbeat

**URL:** https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820
**Category:** Beats
**Tags:** elastic-stack-monitoring, metricbeat
**Created:** [October 30, 2019, 10:09am UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820 "2019-10-30T10:09:16Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![Christophe\_Journel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophe_journel/32/12534_2.png) [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)
#### Post date: [October 30, 2019, 10:09am UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/1 "2019-10-30T10:09:16Z")

</div>

Hello,

I have multiple filebeat on several cluster. The monitoring is done by using beat-xpack feature from metricbeat on another server, using the HTTP entry point on each filebeat.

However, Metricbeat ( with a correct elasticsearch output) always creates a standalone cluster.

How can i force the cluster\_uuid ? I tried to set parameter "override\_cluster\_uuid" in filebeat configuration file, but this parameter is only avalaible when the filebeat directly sends monitoring stats to elasticsearch and that's obvioulsly not what i want.

I only need my metricbeat (using beat\_xpack) to connect to filebeat Entry point and send metrics to an elasticsearch using the right cluster\_uuid

any idea ?

Thanks,

---

<div class="post-metadata">

### Author: ![B.M](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/b.m/32/56771_2.png) [@B.M](https://discuss.elastic.co/u/B.M)
#### Post date: [October 30, 2019, 10:27am UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/2 "2019-10-30T10:27:28Z")

</div>

Try using `monitoring.cluster_uuid:`

---

<div class="post-metadata">

### Author: ![Christophe\_Journel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophe_journel/32/12534_2.png) [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)
#### Post date: [October 30, 2019, 10:59am UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/3 "2019-10-30T10:59:11Z")

</div>

> [@B.M](#):
>
> monitoring.cluster\_uuid:

i already tried this parameter in metricbeat.yml, but this has no effect

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [October 30, 2019, 11:39am UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/4 "2019-10-30T11:39:37Z")

</div>

Hi @Christophe_Journel,

What versions of Filebeat and Metricbeat are you running?

Could you share your `filebeat.yml`, `metricbeat.yml` and `modules.d/beat-xpack.yml` from Metricbeat? Please mask any sensitive information in these files before posting.

Thanks,

Shaunak

---

<div class="post-metadata">

### Author: ![Christophe\_Journel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophe_journel/32/12534_2.png) [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)
#### Post date: [October 30, 2019, 12:55pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/5 "2019-10-30T12:55:23Z")

</div>

> [@shaunak](#):
>
> Could you share your `filebeat.yml` , `metricbeat.yml` and `modules.d/beat-xpack.yml` from Metricbeat? Please mask any sensitive information in these files before posting.

Hello @shaunak

metricbeat version :metricbeat-7.4.0-1.x86\_64  
filebeat version: filebeat-7.4.1-1.x86\_64

And here is the filebeat configuration file (i deleted all unnecessary information and replaced IP addresses etc.)

```auto
 ######################## Filebeat Configuration ############################
 
 #=========================== Filebeat inputs =============================
 
 # List of inputs to fetch data.
 filebeat.inputs:
rpm
 
   path: "/tmp/filebeat"
   filename: filebeat
   rotate_every_kb: 10000
   number_of_files: 2
   permissions: 0600
 
 #================================ Logging ======================================
 logging.level: info
 
 logging.to_files: true
 logging.files:
   path: /var/log/filebeat
   name: filebeat
   rotateeverybytes: 10485760 # = 10MB
   keepfiles: 7
   permissions: 0644
   #interval: 0
 #================================ HTTP Endpoint 
 http.enabled: true
 http.host: 10.10.10.10
 http.port: 5066
```

and here is the metricbeat.yml file

```auto
 ###################### Metricbeat Configuration Example ######################
 #========================== Modules configuration ============================
 
 metricbeat.config.modules:
   # Glob pattern for configuration loading
   path: ${path.config}/modules.d/*.yml
 
   # Set to true to enable config reloading
   reload.enabled: false
 
   # Period on which files under path should be checked for changes
   #reload.period: 10s
 
 #==================== Elasticsearch template setting ==========================
 
 setup.template.settings:
   index.number_of_shards: 1
   index.codec: best_compression
   #_source.enabled: false
 
 #================================ General =====================================
 
 #-------------------------- Elasticsearch output ------------------------------
 output.elasticsearch:
   # Array of hosts to connect to.
   hosts: ["myES1:9200","myES2:9200"]
 
   # Optional protocol and basic auth credentials.
   #protocol: "https"
   username: "elastic"
   password: "XXXXXXXXXXX"
 
 #================================ Processors ====================================
 
 # Configure processors to enhance or manipulate events generated by the beat.
 
 processors:
   - add_host_metadata: ~
   - add_cloud_metadata: ~
 
 monitoring.enable: true
 setup.ilm.enabled: false
 monitoring.cluster_uuid: XXXXXXXXXX
```

The file /etc/metricbeat/modules.d/beat-xpack.yml looks like this:

```auto
# Module: beat
# Docs: https://www.elastic.co/guide/en/beats/metricbeat/7.4/metricbeat-module-beat.html

- module: beat
  metricsets:
    - stats
    - state
  period: 10s
  hosts: ["10.10.10.10"]
  xpack.enabled: true
```

Thanks for your help !

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [October 30, 2019, 6:07pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/6 "2019-10-30T18:07:43Z")

</div>

I _think_ you may have discovered a bug here, but I want to double check something first. In your `filebeat.yml` what `output` are you using?

Shaunak

---

<div class="post-metadata">

### Author: ![Christophe\_Journel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christophe_journel/32/12534_2.png) [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)
#### Post date: [October 30, 2019, 8:24pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/7 "2019-10-30T20:24:15Z")

</div>

Hello,

The only output used in filebeat.yml is the logstash one.  
However, i tried the file output with the same result.

---

<div class="post-metadata">

### Author: ![shaunak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shaunak/32/6643_2.png) [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [October 30, 2019, 9:23pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/8 "2019-10-30T21:23:16Z")

</div>

Thanks. I was able to reproduce your setup locally and this indeed looks like a bug 😞. Thanks for discovering it. I have put up a PR to try and fix it: [https://github.com/elastic/beats/pull/14338](https://github.com/elastic/beats/pull/14338).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 27, 2019, 9:23pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820/9 "2019-11-27T21:23:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
